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Motivation 


Cryptosystems  are  designed  to  protect 
our  sensitive  data  from  evil  adversaries. 
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Cryptosystems  are  designed  to  protect 
our  sensitive  data  from  evil  adversaries. 


Wrong! 
.well,  maybe  not 
,  but  then  again. 
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"Hacker  ethics"  is  about 
a  good  individual  in  a  bad  society. 
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Motivation 


What  is  "evil"? 

"Hacker  ethics"  is  about 
a  good  individual  in  a  bad  society. 

"Witch  hunt  ethics"  is  about 
a  bad  individual  in  a  good  society. 
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I  sensitive  data  from  evil  adversaries 
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Stegosystems  are  designed  to  hide  our 
sensitive  data  from  evil  adversaries 


the  evil  government  censor  infringing  on  our  right 
to  freedom  of  opinion  and  expression. 
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Stegosystems  are  designed  to  hide  our 
sensitive  data  from  evil  adversaries 


the  evil  government  censor  infringing  on  our  right 
to  freedom  of  opinion  and  expression. 

the  greedy  employer  limiting  our  access  to 
computers  and  anything  which  might  teach  us 
something  about  the  way  the  world  really  works. 
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Evil  spies, 

criminal  fraudsters,  and 
nosy  neighbors 


do  not  control  your  communication  channel! 
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Evil  spies, 

criminal  fraudsters,  and 
nosy  neighbors 


do  not  control  your  communication  channel! 


Evil  governments  and 
greedy  employers 


do! 
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communication  channel. 
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Motivation 


A  shift  in  perspectives: 


Alice  and  Bob  do  not  control  their 
communication  channel. 


Wendy  the  warden  does! 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.25/1 82 


I 

Motivation 


What  happens  if  Eve  the  eavesdropper 
intercepts  a  secure  cryptogram? 
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■ 


What  happens  if  Eve  the  eavesdropper 
intercepts  a  secure  cryptogram? 

Nothing! 


the  evil  spy  won't  know  the  sensitive  information 

the  criminal  fraudster  cannot  read  the  banking 
transaction 

the  nosy  neighbor  won't  see  the  contents  of  your 
mail 
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What  happens  if  Wendy  the  warden 
intercepts  a  secure  cryptogram? 
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What  happens  if  Wendy  the  warden 
intercepts  a  secure  cryptogram? 

Serious  consequences! 
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seeks  to  conceal  the  content  of  his  communication? 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.33/1 82 


Motivation 


What  happens  if  Wendy  the  warden 
intercepts  a  secure  cryptogram? 

Serious  consequences! 


What  will  witch-hunt  ethics  assert  about  the 
presupposedly  bad  individual  in  the  good  society,  who 
seeks  to  conceal  the  content  of  his  communication? 

That  Alice  and  Bob  have  something  evil  to  hide! 
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Motivation 


What  happens  if  Wendy  the  warden 
intercepts  a  secure  cryptogram? 

Serious  consequences! 


the  greedy  employer  will  fire  Alice  and  Bob 

the  evil  government  will  send  Alice  and  Bob  to 
Guantanomo  Bay 
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What  happens  if  Wendy  the  warden 
intercepts  a  secure  cryptogram? 

Serious  consequences! 

•  the  greedy  employer  will  fire  Alice  and  Bob 


•  the  evil  government  will  send  Alice  and  Bob  to 
Auschwitz 
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What  happens  if  Wendy  the  warden 
intercepts  a  secure  cryptogram? 

Serious  consequences! 


As  long  as  there  is  a  way  for  Wendy  to  tell  ciphertext 
from  cleartext,  Alice  and  Bob  will  not  live  in  peace! 
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Motivation 


What  happens  if  Wendy  the  warden 
intercepts  a  secure  cryptogram? 

Serious  consequences! 


As  long  as  there  is  a  way  for  Wendy  to  tell  ciphertext 
from  cleartext,  Alice  and  Bob  will  not  live  in  peace! 

Solution:  Alice  and  Bob  must  use  steganographic 
methods,  rather  than  purely  cryptographic  ones,  in 
order  to  hide  not  only  the  content  of  a  message  from 
the  adversary,  but  its  very  existence! 
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The  difference  between  a  cryptogram  and  a 
steganogram,  is  that  a  steganogram  always  appears 

innocuous  to  Wendy. 
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Introduction 


The  difference  between  a  cryptogram  and  a 
steganogram,  is  that  a  steganogram  always  appears 

innocuous  to  Wendy. 

But  what  is  innocuous? 

In  the  simplest  case  Wendy  has  a  list  of  innocuous 

cover  symbols. 
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Introduction 


|      C  =  {  Midshires  is  a  nice  little  city, 

Midshires  is  a  great  little  city, 
Midshires  is  a  fine  little  city, 
Midshires  is  a  decent  little  city, 
Midshires  is  a  wonderful  little  city, 
Midshires  is  a  nice  little  town, 
Midshires  is  a  great  little  town}. 

If  c  e  C,  then  Wendy  knows  that  c  is  innocuous. 
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Introduction 


|       M  =  {  I  don't  like  my  government!, 

I  don't  like  my  internet  provider!, 

I  don't  like  my  employer!, 

I'm  wearing  ladies'  underwear! }. 

Alice  wants  to  send  Bob  a  message  me  M. 
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Introduction 


istead  of  enlisting  c  =  {Midshires  is  a  ...}: 

We  know  an  innocuous  sentence 
c  =  {Midshires  is  a  nice  little  town, } 

We  have  a  dictionary,  that  tells  us  that  the  words 
{nice,  great,  fine,  decent,  wonderful}  and 
{city,  town}  are  synonymous,  i.e.  mean  the  same. 

We  know  that,  by  substituting  a  word  in  c  by  a 
synonym,  we  never  make  an  innocuous  sentence 
suspicious,  since  we  do  not  alter  its  meaning. 
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Instead  of  enlisting  c  =  {Midshires  is  a  ...}: 


C  =  Midshires  is  a  < 


nice 
great 
fine 
decent 
wonderful 


\  little 


city 
town 
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Introduction 


Instead  of  enlisting  M  =  {I  don't  like ...}: 

•  We  assume  that  Alice  and  Bob  will  exchange 
arbitrary  bitstrings,  so  M  =  {0,  l}* 
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Alice  and  Bob  Fool  Wendy 


Midshires  is  a  < 


oo 

01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


m\  = 
ci  = 

ni2  = 

C2  = 


=  101  encodes  to 
Midshires  is  a  fine  little  town 

=  oio  encodes  to 
Midshires  is  a  great  little  city 


0  city 

1  town 
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Alice  and  Bob  Fool  Wendy 


Midshires  is  a  < 


oo 

01 
10 

11 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


Keith  Winstein  and  Mark  Chapman  have  actually  built 
variants  of  this  system. 
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Wendy  Strikes  Back 


Statistic  characteristics  of  the  secret 
message  "show  trough"  to  the 

word-choices  in  the  steganogram! 
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10 
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9  9 


nice 

great 

fine 

decent 

wonderful 


mo  =  1 0 1 
mi  =  001 
m2  =  111 


Wendy  Strikes  Back 


Mittlei  0  ^ 
l  town 
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01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


mi  =  001 

777-2  =  111 
7773  =  1  0  1 


Wendy  Strikes  Back 
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oo 

01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


1712  =  111 

m3  =  1 0 1 
m4  =  0  0  0 


Wendy  Strikes  Back 


\  little 


0  city 

1  tow//? 
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nice 

great 

fine 

decent 

wonderful 


m3  =  1 0 1 
m4  =  0  0  0 
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\  little 
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nice 

great 

fine 

decent 

wonderful 


m4  =  0  0  0 
m5  =  0 1 0 
m6  =  0  0  0 


Wendy  Strikes  Back 


\  little 


0  city 

1  town 
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01 
10 

11 
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nice 

great 

fine 

decent 

wonderful 


m5  =  0 1 0 
m6  =  0  0  0 
m7  =  0 1 0 


Wendy  Strikes  Back 


\  little 


0  c/'fy 

1  tow//? 
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0  l  great 

1  o  fine 

1 1  decent 

?  ?  wonderful 


m6  =  0  0  0 
m7  =  0 1 0 
m8  =  1 0  0 


Wendy  Strikes  Back 
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\  little 
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1  town 
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0  l  great 

1  o  fine 

1 1  decent 

?  ?  wonderful 


m7  =  0 1 0 
m8  =  1 0  0 
mg  =  110 


Wendy  Strikes  Back 
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\  little 


0  city 
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0  l  great 

1  o  fine 

1 1  decent 
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Wendy  Strikes  Back 
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mi5  =  000 
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decent 

wonderful 


\  little 
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Wendy  Strikes  Back 


nnocuous  covers  have  statistic 
characteristics  originating  from  the  way 

native  speakers  use  the  language. 
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Wendy  Strikes  Back 


is  a  < 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


c0  =  M ids  hi  res  is  a  nice  little  town 
ci  =  Midshires  is  a  nice  little  city 
c2  =  Midshires  is  a  nice  little  town 
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Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.69/1 82 


Wendy  Strikes  Back 


is  a  < 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


ci  =  Midshires  is  a  nice  little  city 
c2  =  Midshires  is  a  nice  little  town 
c3  =  Midshires  is  a  nice  little  town 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.70/1 82 


Wendy  Strikes  Back 


is  a  < 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


c2  =  Midshires  is  a  nice  little  town 
c3  =  Midshires  is  a  nice  little  town 
c4  =  Midshires  is  a  nice  little  city 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.71/1 82 


Wendy  Strikes  Back 


is  a  < 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


c3  =  M ids  hi  res  is  a  nice  little  town 
c4  =  Midshires  is  a  nice  little  city 
c5  =  Midshires  is  a  great  little  city 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.72/1 82 


Wendy  Strikes  Back 


is  a  < 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


c4  =  Midshires  is  a  nice  little  city 
c5  =  Midshires  is  a  great  little  city 
c6  =  Midshires  is  a  nice  little  town 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.73/1 82 


Wendy  Strikes  Back 


is  a  < 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


c5  =  Midshires  is  a  great  little  city 
c6  =  Midshires  is  a  nice  little  town 
c7  =  Midshires  is  a  decent  little  town 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.74/1 82 


Wendy  Strikes  Back 


is  a{ 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


c6  =  M ids  hi  res  is  a  nice  little  town 
c7  =  Midshires  is  a  decent  little  town 
c8  =  Midshires  is  a  great  little  town 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.75/1 82 


Wendy  Strikes  Back 


is  a< 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


c7  =  Midshires  is  a  decent  little  town 
c8  =  Midshires  is  a  great  little  town 
c9  =  Midshires  is  a  nice  little  town 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.76/1 82 


Wendy  Strikes  Back 


is  a< 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


c8  =  Midshires  is  a  great  little  town 

c9  =  Midshires  is  a  nice  little  town 

cio  =  Midshires  is  a  wonderful  little  town 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.77/1 82 


Wendy  Strikes  Back 


is  a< 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


cq  =  M ids  hi  res  is  a  nice  little  town 

cio  =  Midshires  is  a  wonderful  little  town 

en  =  Midshires  is  a  great  little  town 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.78/1 82 


Wendy  Strikes  Back 


is  a  < 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


cio  =  Midshires  is  a  wonderful  little  town 
en  =  Midshires  is  a  great  little  town 
C12  =  Midshires  is  a  great  little  city 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.79/1 82 


Wendy  Strikes  Back 


is  a  < 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


en  =  Midshires  is  a  great  little  town 
C12  =  Midshires  is  a  great  little  city 
ci3  =  Midshires  is  a  fine  little  city 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.80/1 82 


Wendy  Strikes  Back 


is  a  < 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


C12  =  Midshires  is  a  great  little  city 
ci3  =  Midshires  is  a  fine  little  city 
d4  =  Midshires  is  a  nice  little  city 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.81/1 82 


Wendy  Strikes  Back 


is  a  < 


00 
01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


\  little 


0  city 

1  town 


ci3  =  Midshires  is  a  fine  little  city 
cu  =  Midshires  is  a  nice  little  city 
Cl5  =  Midshires  is  a  fine  little  city 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.82/1 82 


is  a  < 


oo 

01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


Wendy  Strikes  Back 


\  little 


0  city 

1  town 


Cl4  =  Midshires  is  a  nice  little  city 
Cl5  =  Midshires  is  a  fine  little  city 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.83/1 82 


is  a  < 


oo 

01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


Wendy  Strikes  Back 


\  little 


0  city 

1  town 


c15  =  Midshires  is  a  fine  little  city 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.84/1 82 


is  a  < 


oo 

01 
10 

11 

9  9 


nice 

great 

fine 

decent 

wonderful 


Wendy  Strikes  Back 


\  little 


0  city 

1  town 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.85/1 82 


is  a  < 


is  a  < 


o  o  nice 

0  l  greaf 

1  o  fine 

1 1  decent 

?  ?  wonderful 

o  o  /7/ce 

0  l  greaf 

1  o  fine 

l l  decent 
?  ?  wonderful 


Wendy  Strikes  Back 


.  //We 


o 
i 


c/'fy 

fOI/l/77 


^  Me 


o 
i 


c/'fy 
town 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.86/1 82 


I 

Alice,  Bob,  and  Huffman 


This  weakness  is  due  to 
our  use  of  block  codes! 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.87/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.88/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.89/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.90/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.91/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.92/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.93/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.94/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.95/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.96/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.97/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.98/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.99/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  100/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  101/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  102/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 
01 
10 

11 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  103/1 82 


Alice,  Bob,  and  Huffman 


00101110110010111001011100010100 


00 

V 

01 

p 

10 

p 

11 

p 

1/4  (00,01,10,11) 
1/4  (00,01,10,11) 
1/4  (00,01,10,11) 
1/4  (00,01,10,11) 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  104/1 82 


Alice,  Bob,  and  Huffman 


This  weakness  is  due  to 
our  use  of  block  codes! 


However,  we  can  overcome  it,  by  using 
prefix-free  variable  length  codes. 

Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  105/1 82 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

0 
10 
110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  106/1 82 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  I 

10 
110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  107/1 82 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  I 

10 
110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  108/1 82 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

0  || 
10 
110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  109/1 82 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  ill 

10 
110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  1 1 0/1 82 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  ill 

10 
110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  1 1 1  /1 82 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  mi 

10 
110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  1 12/182 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  inn 

10 
110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  1 1 3/1 82 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  inn 

10  I 

110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  1 14/182 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  Him 

10  I 

110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  1 15/182 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  Him 

10  I 

110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  1 16/182 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  Him 

10  I 

110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  1 17/182 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  mini 

10  I 

110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  1 18/182 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  mini 

10  || 
110 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  1 1 9/1 82 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  mini 

10  || 
110  I 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  120/1 82 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 

o  mini 

10  ill 

110  I 
1110 

1111 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  121/1 82 


I 

Alice,  Bob,  and  Huffman 


001000110001001110111101011010 


0 

P  = 

1/2  (0,1) 

10 

p  = 

1/4  (00,01,10,11) 

110 

p  = 

1/8  (000, 001, ...,110,...) 

1110 

V  = 

1/16  (0000, 0001, ...,1110, 

...) 

1111 

p  = 

1/16  (0000, 0001, ...,1111, 

...) 

Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  122/1 82 


Alice,  Bob,  and  Huffman 


001000110001001110111101011010 


0 

p  = 

1/2  (0,1) 

10 

p  = 

1/4  (00,01,10,11) 

110 

p  = 

1/8  (000, 001, ...,110,...) 

1110 

p  = 

1/16  (0000, 0001, ...,1110, 

...) 

1111  1 

p  = 

1/16  (0000, 0001, ...,1111, 

...) 

The  use  of  prefix  free  variable  length  codes  in 
steganography  is  due  to  Peter  Wayner! 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  123/1 82 


Wendy's  Cryptographic  Problem 

By  word-choice  encoding  on  the  basis  of  a 
Huffman-code  we  can  provide  mimicry. 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  124/1 82 


Wendy's  Cryptographic  Problem 


By  word-choice  encoding  on  the  basis  of  a 
Huffman-code  we  can  provide  mimicry. 

Mimicry  turns  a  secret  message  m  e  M  to  an 
innocuous  looking  cover  ce  C. 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  125/1 82 


Wendy's  Cryptographic  Problem 


By  word-choice  encoding  on  the  basis  of  a 
Huffman-code  we  can  provide  mimicry. 

Mimicry  turns  a  secret  message  m  e  M  to  an 
innocuous  looking  cover  ce  C. 

To  know  whether  our  scheme  is 
steganographically  secure,  we  have  to  ask 
ourselves  the  following  question: 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  126/1 82 


Wendy's  Cryptographic  Problem 


_ 


•  By  word-choice  encoding  on  the  basis  of  a 
Huffman-code  we  can  provide  mimicry. 

•  Mimicry  turns  a  secret  message  m  e  M  to  an 
innocuous  looking  cover  ce  C. 

•  To  know  whether  our  scheme  is 
steganographically  secure,  we  have  to  ask 
ourselves  the  following  question: 

If  it  is  trivial  for  Bob  to  decode  a 
message,  then  why  shouldn't  Wendy  do 

the  very  same  thing? 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  127/1 82 


Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  OUT 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  128/1 82 


Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  OUT 


steganogram 


Dear  Grandma! 
We're  having  a  lot 
of  fun,  here  at 
the  summer  camp! 


mimicry 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  129/1 82 


Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  OUT 


steganogram 


Dear  Grandma! 
We're  having  a  lot 
of  fun,  here  at 
the  summer  camp! 


mimicry 


Dear  Dad! 
Summer  camp 
sucks !  Get  me 
out  of  here! 


kid  writing 
home  from 
summer  camp 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  130/1 82 


Wendy's  Cryptographic  Problem 


Alice 


plaintext 

steganogram 

~D  T>  TT^/^TT  C  r\TTT 

Dear  Grandma! 
We're  having  a  lot 

 3* 

of  fun,  here  at 
the  summer  camp! 

mimicry 

Dear  Dad! 
Summer  camp 

sucks !  Get  me 
out  of  here! 

^  

■ 


kid  writing 
home  from 
summer  camp 


Wendy  cannot 
distinguish  this. 

Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  131/1 82 


Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  ( 


????? 


UT 


mimicry 


mimicry 


Siesanogram 


Dear 
We're 
of  fun 
the  summer 


Grandma! 
having  a  lot 
here  at 

camp! 


Dea 


Sun  mer 


sucl 
out 


-1 


Dad! 

camp 
s !  Get  me 
here! 


)f 


_ 


Wendy  can 
reverse  this 


kid  writing 
home  from 
summer  camp 


Wendy  cannot 
distinguish  this. 

Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  132/1 82 


Wendy's  Cryptographic  Problem 


Alice 


plaintext 


BRIDGES  ( 


????? 


UT 


Qimicrj 


e  umicry 


Siesanogram 


Dear 
We're 
of  fun 
the  summer 


Grandma! 
having  a  lot 
here  at 

camp! 


Dea 


Sun  mer 


sucl 
out 


-1 


Dad! 

camp 
s !  Get  me 
here! 


)f 


_ 


Wendy  can 
distinguish  this. 


Wendy  can 
reverse  this 


kid  writing 
home  from 
summer  camp 


Wendy  cannot 
distinguish  this. 

Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  133/1 82 


Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  OUT 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  134/1 82 


Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  OUT 


cryptogram 


00101010110 
01010110111 
01011010011 
01011101100 


encryption 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  135/1 82 


Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  OUT 


cryptogram 


00101010110 
01010110111 
01011010011 
01011101100 


steganogram 


Dear  Grandma! 
We're  having  a  lot 
of  fun,  here  at 
the  summer  camp! 


encryption 


mimicry 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  136/1 82 


Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  OUT 


cryptogram 


00101010110 
01010110111 
01011010011 
01011101100 


encryption 


steganogram 


Dear  Grandma! 
We're  having  a  lot 
of  fun,  here  at 
the  summer  camp! 


mimicry 


Dear  Dad! 
Summer  camp 
sucks!  Get  me 
out  of  here! 


kid  writing 
home  from 
summer  cam 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  137/1 82 


Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  OUT 


encryption 


f  > 

cryptogram 

steganogram 

00101010110 
01010110111 

 > 

Dear  Grandma! 
We're  having  a  lot 

01011010011 
01011101100 

of  fun,  here  at 
the  summer  camp! 

mimicr) 

Dear  Dad! 
Summer  camp 

sucks!  Get  me 
out  of  here! 

<s  

kid  writing 
home  from 
summer  cam 


_ 


Wendy  cannot 
distinguish  this. 
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Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  OUT 


encryption 


_ 


cryptogram 


00101010 

.10 

01010110 

.11 

01011010 

)11 

01011101 

.00 

10101110 

.10 

01110111 

)11 

01010101 

)11 

01110110 

.10 

mimicr) 


mimicry 


sJ^sanogram 


Dear 
We're 
of  fun 
the  summer 


(prandma! 
having  a  lot 
here  at 

camp! 


Dea 
Sun 
sue! 
out 


-1 


Dad! 

mer  camp 
s!  Get  me 
here! 


)f 


kid  writing 
home  from 
summer  cam 


Wendy  can       Wendy  cannot 
reverse  this       distinguish  this. 
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Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  OUT 


encryptio]  i 


cryptogram 


00101010 
01010110 
01011010 
01011101 


10101110 
01110111 
01010101 
01110110 


10 

11 

D 11 
00 


10 

)11 
)11 

10 


nimicr) 


n  Limicry 


slesanogram 


Dear 
We're 
of  fun 
the  summer 


(prandma! 
having  a  lot 
here  at 

camp! 


Dea 
Sun 
sue! 
out 


-1 


Dad! 

mer  camp 
s!  Get  me 
here! 


)f 


■ 


Wendy  can  Wendy  cannot 
reverse  this       distinguish  this. 


kid  writing 
home  from 
summer  cam 


Wendy  cannot 
distinguish  this. 
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Wendy's  Cryptographic  Problem 


plaintext 


Alice 


BRIDGES  0 


????? 


UT 


encryptio]  i 


encryptio]  l 


Cryptogram 


00 
010 
010 
010 


10 


10 
01 

oia 

01 


-1 


1010 
10110 
11010 
11101 


10 


11 


11 


1110 
0111 
10101 
0110 


10 

11 

D 11 
00 


10 

)11 
)11 

10 


nimicr) 


n  Limicry 


slesanogram 


Dear 
We're 
of  fun 
the  summer 


(prandma! 
having  a  lot 
here  at 

camp! 


Dea 
Sun 
sue! 
out 


-1 


Dad! 

mer  camp 
s!  Get  me 
here! 


)f 


_ 


Wendy  cannot 
reverse  this 
without  a  key 


Wendy  can  Wendy  cannot 
reverse  this       distinguish  this. 


kid  writing 
home  from 
summer  cam 


Wendy  cannot 
distinguish  this. 
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Wendy's  Linguistic  Problem 


And  now  to  something  completely 

different! 
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Wendy's  Linguistic  Problem 


And  now  to  something  completely 

different! 

Al-complete  /A-l  k*m-pleet'/  [MIT,  Stanford:  by 
analogy  with  'NP-complete'  (see  NP-)]  adj. 
Used  to  describe  problems  or  subproblems  in 
Al,  to  indicate  that  the  solution  presupposes  a 
solution  to  the  'strong  Al  problem'  (that  is,  the 
synthesis  of  a  human-level  intelligence).  A 
problem  that  is  Al-complete  is,  in  other  words, 
just  too  hard[...] 

The  Jargon  Files 
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Wendy's  Linguistic  Problem 


Humans  can  easily  solve  Al-complete  problems. 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  144/1 82 


Wendy's  Linguistic  Problem 

Humans  can  easily  solve  Al-complete  problems. 
Computers  cannot. 


_ 
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Wendy's  Linguistic  Problem 

Humans  can  easily  solve  Al-complete  problems. 
Computers  cannot. 
Wendy  is  a  computer. 


_ 
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Wendy's  Linguistic  Problem 


Humans  can  easily  solve  Al-complete  problems. 
Computers  cannot. 
Wendy  is  a  computer. 

If  reversing  our  steganographic  embedding  yields 
an  Al-complete  problem,  Wendy  is  truly  in  trouble, 
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Wendy's  Linguistic  Problem 


Humans  can  easily  solve  Al-complete  problems. 
Computers  cannot. 
Wendy  is  a  computer. 

If  reversing  our  steganographic  embedding  yields 
an  Al-complete  problem,  Wendy  is  truly  in  trouble. 

We  can  construct  such  a  system,  by  using  the 
linguistic  problem  of  word-sense 
disambiguation. 


_ 
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Wendy's  Linguistic  Problem 


It  should  move  through  several  more  drafts. 
It  should  run  through  several  more  drafts. 
It  should  go  through  several  more  drafts. 
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Wendy's  Linguistic  Problem 


•  It  should  move  through  several  more  drafts. 

•  It  should  run  through  several  more  drafts. 

•  It  should  go  through  several  more  drafts. 

•  All  articles  must  move  through  copy-editing. 
All  articles  must  run  through  copy-editing. 

•  All  articles  must  go  through  copy-editing. 


I   — - 


Wendy's  Linguistic  Problem 


It  should  move  through  several  more  drafts. 
It  should  run  through  several  more  drafts. 
It  should  go  through  several  more  drafts. 

All  articles  must  move  through  copy-editing. 
All  articles  must  run  through  copy-editing. 
All  articles  must  go  through  copy-editing. 


syn(move)  =  {move,  run,  go}  ?? 


_ 
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Wendy's  Linguistic  Problem 


That  sermon  will  move  people. 
That  sermon  will  impress  people. 
That  sermon  will  strike  people. 
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Wendy's  Linguistic  Problem 


That  sermon  will  move  people. 
That  sermon  will  impress  people. 
That  sermon  will  strike  people. 

Your  speech  must  move  the  audience. 
Your  speech  must  impress  the  audience. 
Your  speech  must  strike  the  audience. 


_ 
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Wendy's  Linguistic  Problem 


That  sermon  will  move  people. 
That  sermon  will  impress  people. 
That  sermon  will  strike  people. 

Your  speech  must  move  the  audience. 
Your  speech  must  impress  the  audience. 
Your  speech  must  strike  the  audience. 


syn(move)  =  {move,  impress,  strike}  ?? 
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Wendy's  Linguistic  Problem 


Can  we  conclude  that  all  these  words  are  generally 
synonymous  to  move? 

syn(move)  =  {move,  run,  go,  impress,  strike} 
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Wendy's  Linguistic  Problem 


Can  we  conclude  that  all  these  words  are  generally 
synonymous  to  move? 

syn(move)  =  {move,  run,  go,  impress,  strike} 

Unfortunately,  we  can't. 
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Wendy's  Linguistic  Problem 


It  should  move  through  several  more  drafts. 
It  should  run  through  several  more  drafts. 
It  should  go  through  several  more  drafts. 
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Wendy's  Linguistic  Problem 


It  should  move  through  several  more  drafts. 
It  should  run  through  several  more  drafts. 
It  should  go  through  several  more  drafts. 


BUT 


Your  speech  must  move  the  audience. 

*  Your  speech  must  run  the  audience. 

*  Your  speech  must  go  the  audience. 


_ 
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Wendy's  Linguistic  Problem 


That  sermon  will  move  people. 
That  sermon  will  impress  people. 
That  sermon  will  strike  people. 
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Wendy's  Linguistic  Problem 


That  sermon  will  move  people. 
That  sermon  will  impress  people. 
That  sermon  will  strike  people. 


BUT 


All  articles  must  move  through  copy-editing. 
*AII  articles  must  impress  through  copy-editing. 
*All  articles  must  strike  through  copy-editing. 


_ 
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Wendy's  Linguistic  Problem 


We  cannot  include  a  synset  like 

syn(move)  =  {move,  run,  go,  impress,  strike} 

in  a  dictionary! 


All  we  can  do  is  to  state  that 

syn(ci,move)   =   {move,  run,  go} 
syn(c2,move)   =  {move,  impress,  strike} 

for  some  linguistic  contexts  ci  ^  c2. 
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Wendy's  Linguistic  Problem 


Recall  the  way  our  encoder  works: 

I  •  We  have  an  innocuous  sentence: 
That  sermon  will  impress  people 
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Wendy's  Linguistic  Problem 


Recall  the  way  our  encoder  works: 

I  •  We  have  an  innocuous  sentence: 
That  sermon  will  impress  people 

•  We  have  a  set  of  words  that  can  be  replaced  for 
this  {move,  impress,  strike} 


_ 
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Wendy's  Linguistic  Problem 


Recall  the  way  our  encoder  works: 

We  have  an  innocuous  sentence: 
That  sermon  will  impress  people 

•  We  have  a  set  of  words  that  can  be  replaced  for 
this  {move,  impress,  strike} 

•  We  assign  codewords  to  them  like 
move  ->  o ,  impress  ->  1 0 ,  strike  -»•  1 1 


_ 
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Wendy's  Linguistic  Problem 


Recall  the  way  our  encoder  works: 

We  have  an  innocuous  sentence: 
That  sermon  will  impress  people 

•  We  have  a  set  of  words  that  can  be  replaced  for 
this  {move,  impress,  strike} 

•  We  assign  codewords  to  them  like 
move  ->  o ,  impress  ->  1 0 ,  strike  -»•  1 1 

•  To  send  a  secret  o,  we  transmit 
Tfraf  sermon  will  move  people 


_ 
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- 


Wendy's  Linguistic  Problem 


How  would  Wendy  steganalyze  this? 

•  She  intercepts 
That  sermon  will  move  people 


_ 
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Wendy's  Linguistic  Problem 


How  would  Wendy  steganalyze  this? 

•  She  intercepts 
That  sermon  will  move  people 

•  Now  she  has  to  find  the  code  for  move. 


_ 
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Wendy's  Linguistic  Problem 


How  would  Wendy  steganalyze  this? 

•  She  intercepts 
That  sermon  will  move  people 

•  Now  she  has  to  find  the  code  for  move. 

•  However,  there  will  be  multiple  codes  for  this: 

•  move  ->  o ,  impress  ->  1 0 ,  strike  -»•  1 1  (correct) 

•  o//?^  o,moi/e^  io,go^  11  (incorrect) 


_ 
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Wendy's  Linguistic  Problem 


How  would  Wendy  steganalyze  this? 

•  She  intercepts 
That  sermon  will  move  people 

•  Now  she  has  to  find  the  code  for  move. 

However,  there  will  be  multiple  codes  for  this: 
•  move  ->  o ,  impress  ->  1 0 ,  strike  -»•  1 1  (correct) 
a//7^  o,moi/e^  io,go^  11  (incorrect) 

•  In  order  to  decode  this  replacement,  Wendy  has  to 
solve  an  instance  of  the  Al-complete  problem  of 
word-sense  ambiguity! 


_ 
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Concluding  Remarks 

We  showed  that  steganography  can  be  motivated 
by  the  application  of  hacker  ethics  to  cryptographic 
system  design. 


_ 
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Concluding  Remarks 


We  showed  that  steganography  can  be  motivated 
by  the  application  of  hacker  ethics  to  cryptographic 
system  design. 

We  showed  a  simple  technique  to  hide  data  by 
replacing  words  in  innocuous  text  by  synonyms. 


_ 
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Concluding  Remarks 


We  showed  that  steganography  can  be  motivated 
by  the  application  of  hacker  ethics  to  cryptographic 
system  design. 

We  showed  a  simple  technique  to  hide  data  by 
replacing  words  in  innocuous  text  by  synonyms. 

We  showed  how  to  detect  such  steganograms 
using  statistic  patterns. 


_ 
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Concluding  Remarks 

I  •  We  showed  how  to  improve  the  technique,  so  that 
detection  becomes  more  difficult. 


_ 
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Concluding  Remarks 


We  showed  how  to  improve  the  technique,  so  that 
detection  becomes  more  difficult. 

We  showed  an  approach  towards  making  the 
technique  secure  against  arbitrators  who  do  not 
have  a  certain  key. 
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Concluding  Remarks 


We  showed  how  to  improve  the  technique,  so  that 
detection  becomes  more  difficult. 

We  showed  an  approach  towards  making  the 
technique  secure  against  arbitrators  who  do  not 
have  a  certain  key. 

We  showed  an  approach  towards  making  the 
technique  secure  against  arbitrators  who  are  not 
human. 


_ 
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Concluding  Remarks 

We  did  not  review  the  actual  systems  implemented 
so  far. 


_ 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  176/1 82 


Concluding  Remarks 

We  did  not  review  the  actual  systems  implemented 
so  far. 

We  did  not  review  much  related  literature. 


_ 
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Concluding  Remarks 


We  did  not  review  the  actual  systems  implemented 
so  far. 

We  did  not  review  much  related  literature. 

We  did  not  show  how  to  make  the  technique 
robust. 


_ 
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Concluding  Remarks 


We  did  not  review  the  actual  systems  implemented 
so  far. 

We  did  not  review  much  related  literature. 

We  did  not  show  how  to  make  the  technique 
robust. 

We  did  not  show  how  to  use  our  linguistic 
properties  for  simple  human  interactive  proofs. 


_ 
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Concluding  Remarks 


We  did  not  review  the  actual  systems  implemented 
so  far. 

We  did  not  review  much  related  literature. 

We  did  not  show  how  to  make  the  technique 
robust. 

We  did  not  show  how  to  use  our  linguistic 
properties  for  simple  human  interactive  proofs. 


Please  see  the  provided  references  for  these  things! 


_ 
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This  slide-set  is  not  a  self-contained  publication. 
Please  conduct  the  references  instead. 

In  particular,  note  that  sources  were  not  properly  cited 
in  this  slide-set.  See  the  citations  given  in  the 
project-report  for  reference  on  sources. 


Natural  Language  Steganography  and  an  "Al-complete"  Security  Primitive  -  p.  181/1 82 
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